From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:39461) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bFiPJ-0004GP-6Q for qemu-devel@nongnu.org; Wed, 22 Jun 2016 09:41:33 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bFiP6-0002h0-TZ for qemu-devel@nongnu.org; Wed, 22 Jun 2016 09:41:28 -0400 Received: from indium.canonical.com ([91.189.90.7]:46759) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bFiP6-0002gq-Le for qemu-devel@nongnu.org; Wed, 22 Jun 2016 09:41:16 -0400 Received: from loganberry.canonical.com ([91.189.90.37]) by indium.canonical.com with esmtp (Exim 4.76 #1 (Debian)) id 1bFiP5-00063H-Kh for ; Wed, 22 Jun 2016 13:41:15 +0000 Received: from loganberry.canonical.com (localhost [127.0.0.1]) by loganberry.canonical.com (Postfix) with ESMTP id 83A8C2E80C8 for ; Wed, 22 Jun 2016 13:41:15 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Date: Wed, 22 Jun 2016 13:30:45 -0000 From: "T. Huth" <1218098@bugs.launchpad.net> Reply-To: Bug 1218098 <1218098@bugs.launchpad.net> Sender: bounces@canonical.com References: <20130828223335.26000.79391.malonedeb@soybean.canonical.com> Message-Id: <20160622133046.17636.30022.launchpad@wampee.canonical.com> Errors-To: bounces@canonical.com Subject: [Qemu-devel] [Bug 1218098] Re: qemu-system-ppc64 segfaults in helper_ldl_mmu List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org ** Changed in: qemu Status: Fix Committed =3D> Fix Released -- = You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1218098 Title: qemu-system-ppc64 segfaults in helper_ldl_mmu Status in QEMU: Fix Released Bug description: Download a Fedora 19 ISO from: http://mirrors.kernel.org/fedora-secondary/releases/19/Fedora/ppc64/iso/ Compile qemu from git (I'm using 401c227b0a1134245ec61c6c5a9997cfc963c8e4 from today). Run qemu-system-ppc64 like this: ppc64-softmmu/qemu-system-ppc64 -M pseries -m 4096 -hda /dev/fedora/f20ppc64 -cdrom /tmp/Fedora-19-ppc64-DVD.iso -netdev user,id=3Dusernet,net=3D169.254.0.0/16 -device virtio-net- pci,netdev=3Dusernet Guest gets to yaboot. If you hit return, qemu segfaults: Program received signal SIGABRT, Aborted. 0x00007ffff041fa19 in __GI_raise (sig=3Dsig@entry=3D6) =C2=A0=C2=A0=C2=A0=C2=A0at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig); (gdb) t a a bt Thread 4 (Thread 0x7fff6eef7700 (LWP 7553)): #0 sem_timedwait () =C2=A0=C2=A0=C2=A0=C2=A0at ../nptl/sysdeps/unix/sysv/linux/x86_64/sem_tim= edwait.S:101 #1 0x00005555559a5897 in qemu_sem_timedwait (sem=3Dsem@entry=3D0x5555563= 1e788, =C2=A0=C2=A0=C2=A0=C2=A0ms=3Dms@entry=3D10000) at util/qemu-thread-posix.= c:238 #2 0x000055555577e54c in worker_thread (opaque=3D0x55555631e6f0) =C2=A0=C2=A0=C2=A0=C2=A0at thread-pool.c:97 #3 0x00007ffff625ec53 in start_thread (arg=3D0x7fff6eef7700) =C2=A0=C2=A0=C2=A0=C2=A0at pthread_create.c:308 #4 0x00007ffff04df13d in clone () =C2=A0=C2=A0=C2=A0=C2=A0at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 3 (Thread 0x7fff6e605700 (LWP 7547)): #0 0x00007ffff041fa19 in __GI_raise (sig=3Dsig@entry=3D6) =C2=A0=C2=A0=C2=A0=C2=A0at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff0421128 in __GI_abort () at abort.c:90 #2 0x000055555583ea33 in helper_ldl_mmu (env=3D0x7ffff7fd7140, addr=3D15= 72864, =C2=A0=C2=A0=C2=A0=C2=A0mmu_idx=3D1) at /home/rjones/d/qemu/include/exec/= softmmu_template.h:153 #3 0x00007fffab0819d8 in code_gen_buffer () #4 0x00005555557aa7ae in cpu_tb_exec (tb_ptr=3D, =C2=A0=C2=A0=C2=A0=C2=A0cpu=3D0x7ffff7fd7010) at /home/rjones/d/qemu/cpu-= exec.c:56 #5 cpu_ppc_exec (env=3Denv@entry=3D0x7ffff7fd7140) =C2=A0=C2=A0=C2=A0=C2=A0at /home/rjones/d/qemu/cpu-exec.c:631 #6 0x00005555557abc35 in tcg_cpu_exec (env=3D0x7ffff7fd7140) =C2=A0=C2=A0=C2=A0=C2=A0at /home/rjones/d/qemu/cpus.c:1193 #7 tcg_exec_all () at /home/rjones/d/qemu/cpus.c:1226 #8 qemu_tcg_cpu_thread_fn (arg=3D) =C2=A0=C2=A0=C2=A0=C2=A0at /home/rjones/d/qemu/cpus.c:885 #9 0x00007ffff625ec53 in start_thread (arg=3D0x7fff6e605700) =C2=A0=C2=A0=C2=A0=C2=A0at pthread_create.c:308 #10 0x00007ffff04df13d in clone () =C2=A0=C2=A0=C2=A0=C2=A0at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 1 (Thread 0x7ffff7fa9a40 (LWP 7542)): #0 0x00007ffff04d4c2f in __GI_ppoll (fds=3D0x555556483210, nfds=3D4, =C2=A0=C2=A0=C2=A0=C2=A0timeout=3D, timeout@entry=3D0x7fff= ffffd940, =C2=A0=C2=A0=C2=A0=C2=A0sigmask=3Dsigmask@entry=3D0x0) at ../sysdeps/unix= /sysv/linux/ppoll.c:56 #1 0x0000555555762db9 in ppoll (__ss=3D0x0, __timeout=3D0x7fffffffd940, =C2=A0=C2=A0=C2=A0=C2=A0__nfds=3D, __fds=3D) =C2=A0=C2=A0=C2=A0=C2=A0at /usr/include/bits/poll2.h:77 #2 qemu_poll_ns (fds=3D, nfds=3D, =C2=A0=C2=A0=C2=A0=C2=A0timeout=3Dtimeout@entry=3D951497) at qemu-timer.c= :276 #3 0x000055555572b58c in os_host_main_loop_wait (timeout=3D951497) =C2=A0=C2=A0=C2=A0=C2=A0at main-loop.c:228 #4 main_loop_wait (nonblocking=3D) at main-loop.c:484 #5 0x00005555555ef9d8 in main_loop () at vl.c:2090 #6 main (argc=3D, argv=3D, envp=3D) =C2=A0=C2=A0=C2=A0=C2=A0at vl.c:4435 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1218098/+subscriptions